Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/294ba3b964b36a3ad6e11cab14bdc3d1219fdbdb.roa
File:                     294ba3b964b36a3ad6e11cab14bdc3d1219fdbdb.roa (raw, json)
Hash identifier:          l0BD5Ra81IGvzmGx9aC9fNd40fG9UT4CeRQRqFw/lHU=
Subject key identifier:   12:78:71:07:F4:02:61:C4:A1:CD:E2:91:13:27:14:89:66:91:37:E4
Certificate issuer:       /CN=520a0d5e45ba98b3623fd2e4c2f44d192076b7f8
Certificate serial:       242FFA
Authority key identifier: 85:F5:91:97:72:D7:FD:41:EA:ED:80:91:30:3C:E5:92:C6:CA:E7:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/294ba3b964b36a3ad6e11cab14bdc3d1219fdbdb.roa
Signing time:             Sun 29 Oct 2023 07:30:00 +0000
ROA not before:           Sun 29 Oct 2023 07:30:00 +0000
ROA not after:            Tue 28 Oct 2025 07:30:00 +0000
asID:                     263817
IP address blocks:        138.185.28.0/24 maxlen: 24
                          138.185.30.0/24 maxlen: 24
                          138.185.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2371578 (0x242ffa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520a0d5e45ba98b3623fd2e4c2f44d192076b7f8
        Validity
            Not Before: Oct 29 07:30:00 2023 GMT
            Not After : Oct 28 07:30:00 2025 GMT
        Subject: CN=294ba3b964b36a3ad6e11cab14bdc3d1219fdbdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:18:fe:41:77:85:47:a0:f8:8a:4d:de:b5:
                    ab:d7:f6:b6:0a:3a:94:58:84:d7:3b:a8:c7:11:56:
                    36:df:6b:e9:10:54:39:e2:c9:52:ed:6d:7a:59:0a:
                    67:66:23:ae:19:86:c9:44:0e:0e:7a:db:d7:96:f4:
                    7b:b8:63:d4:e0:32:ba:79:57:4c:e5:7b:2b:66:a3:
                    d6:17:94:d8:c0:cc:60:f3:99:e5:4a:e1:d1:3d:b6:
                    e5:c7:9d:ed:ce:21:77:1e:75:91:48:f2:18:9b:91:
                    c6:1e:6c:52:e9:da:81:c8:45:76:8e:69:bb:a2:9c:
                    c0:f9:d5:c1:6f:81:19:6b:1e:68:69:9d:58:a2:9d:
                    42:40:6a:5b:ba:02:bb:eb:7b:0a:ef:98:05:d4:ac:
                    d9:73:e3:69:b9:c8:f4:84:9e:58:3b:01:7f:af:fe:
                    9a:94:cc:ad:9d:51:09:e3:ad:c4:e7:ea:ea:81:63:
                    b7:bc:72:ed:f9:99:ee:50:db:0c:da:08:eb:00:48:
                    66:d8:69:69:21:f6:05:fa:bd:14:39:c6:85:1e:6a:
                    88:bd:db:73:ee:78:86:55:c7:33:8c:c1:37:f4:13:
                    ac:69:8e:6b:b9:60:25:46:d9:1a:3b:64:cb:3d:90:
                    75:3d:63:ed:fb:d6:87:bf:02:7a:e6:58:21:25:df:
                    10:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:78:71:07:F4:02:61:C4:A1:CD:E2:91:13:27:14:89:66:91:37:E4
            X509v3 Authority Key Identifier:
                keyid:85:F5:91:97:72:D7:FD:41:EA:ED:80:91:30:3C:E5:92:C6:CA:E7:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/294ba3b964b36a3ad6e11cab14bdc3d1219fdbdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.28.0/24
                  138.185.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:24:5e:b0:cf:8c:54:6d:65:cc:a1:6d:29:13:78:03:55:f5:
         48:5f:2d:f1:e1:26:c3:41:3d:aa:10:d1:72:51:25:2d:50:ce:
         20:f6:d9:95:f0:d9:03:4d:a7:d4:5d:fa:04:d4:95:00:98:a2:
         70:be:e3:b8:99:fa:63:67:db:fa:c6:fe:8a:9b:83:50:d2:c6:
         14:6b:5b:c6:82:6a:b1:72:bc:d2:a3:fe:51:98:d4:7d:8f:83:
         00:06:1b:a2:5f:cf:15:bf:18:d2:03:4f:26:6e:cf:60:fc:66:
         62:15:98:8c:38:dc:b6:d1:b5:b4:d8:6a:48:26:7b:fb:27:1d:
         b1:97:f1:02:24:10:79:26:3e:38:a4:f3:39:28:ef:e8:04:62:
         82:d8:0a:4d:3d:99:9f:00:2a:db:6d:7c:44:5f:c9:f3:f1:9d:
         19:18:27:c7:74:4c:32:76:2a:a5:7d:52:f4:40:36:5f:f5:e3:
         48:bd:3d:78:2a:28:13:9a:b3:27:35:94:f1:2b:b0:69:23:53:
         53:c0:4a:c0:25:b5:86:95:26:30:77:5b:83:91:8b:17:66:8f:
         ae:bf:54:21:98:3b:1c:16:7a:31:de:c3:f5:25:99:3b:fd:29:
         23:7e:9c:b5:ea:6a:1f:fb:f9:38:c9:0c:f4:29:48:f8:6e:29:
         ab:f9:66:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org